Ch. 9 Securing Network Traffic Using Ipsec

Front 1

the act of falsifying the source IP address in an IP packet

Back 1

address spooking

Front 2

a formula used to process data for encryption or decryption

Back 2

algorithm

Front 3

an encryption method that uses two different keys.

Back 3

asymmetrical encryption

Front 4

the process through which a computer's identity is verified

Back 4

authentication

Front 5

the IPSec mode that performs authentication and ensures data integrity on teh entire IP packet, including the headers

Back 5

authentication headers (AH) mode

Front 6

a part of public key infrastructure that contains a public key and an expiry date.

Back 6

certificate

Front 7

a service installed in Windows Server 2003 that allows it to act as a certificate authority

Back 7

Certificate Services

Front 8

a server that issues certificates

Back 8

certificate authority (CA)

Front 9

data that has been encrypted

Back 9

ciphertext

Front 10

the process of encrypting and decrypting messages and files using an algorithm

Back 10

cryptography

Front 11

an algorithm for data encryption defined by the U.S. government in 1977 that uses 56-bit key

Back 11

Data Encryption Standard (DES)

Front 12

modifying the contents of packets that have been captured with a packet sniffer before resending them on the network

Back 12

data modification

Front 13

resending packets that have been previously captured with a packet sniffer

Back 13

data replay

Front 14

the process of making encrypted data readable

Back 14

decryption

Front 15

a process that uses both hash encryption and asymetrical encryption to ensure data integrity and nonrepudiation

Back 15

digital signature

Front 16

the IPSec mode that performs authentication , data integrity, and encryption onthe data portion of an IP packet.

Back 16

encapsulating securiy payload (ESP) mode

Front 17

the process of rendering data unreadable by applying an algorithm

Back 17

encryption

Front 18

a type of one-way encryption that cannot be decrypted. it is used to store information such as passwords and to create checksums.

Back 18

hash encryprtion

Front 19

a summary of the data being encrypted using hash encryption

Back 19

hash value

Front 20

a protocol used by IPSec to negotiate security parameters, perform authentication, and ensure the secure exchange of encryption keys.

Back 20

Internet Key Exchange (IKE)

Front 21

a list of IP protocols that are affected by a rule in an IPSec policy

Back 21

IP filter list

Front 22

a protocol that adds security functions to IPv4

Back 22

IP Security (IPSec)

Front 23

Defines what is done to traffic that matches an IP filter list in an IPSec rule

Back 23

IPSec filter action

Front 24

a set of rules that defines how packets are treated by IPSec. Must be applied

Back 24

IPSec policy

Front 25

the combination of an IP filter list and an IPSec filter action

Back 25

IPSec rules

Front 26

an MMC snap-in that allows the monitoring of IPSec security association and configuration

Back 26

IPSec Security Monitor

Front 27

The preferred authentication method used by Active Directory.

Back 27

Kerberos

Front 28

It is the simplest authentication method to implement for IPSec if all devices are part of the same Active Directory forset

Back 28

Kerberos

Front 29

a number, usually large to prevent it from being guessed used in combination with an algorithm to encrypt data

Back 29

key

Front 30

a hashing algorithm that produces a 129-bit message digest

Back 30

Message Digest 5

Front 31

a type of logging the reacks the establishment of security associations

Back 31

Oakley logs

Front 32

Software used to view (capture) all packets that are traveling on a network

Back 32

packet sniffer

Front 33

an IPSec authentication method whereby each device is preconfigured with a string of text

Back 33

preshared key

Front 34

the key in asymetrical encryption that is seen only by the user to which it is issued

Back 34

private key

Front 35

the key in asymetrical encryption that is freely distributed to other users

Back 35

public key

Front 36

an MMC snap-in that is used to troubleshoot the implementation of Group Policies

Back 36

Resultant Set of Policy (RSoP) snap-in

Front 37

a hashing algorithm that produces a 160-bit message digest

Back 37

Secure Hashing Algorithm (SHA1)

Front 38

a Transport Layer protocol that encrypts data commuincation between a client and service.

Back 38

Secure Socket Layer (SSL)

Front 39

the security terms negotiated between two hosts using IPSec

Back 39

security association (SA)

Front 40

encryption that uses the same key to encrypt and decrypt data

Back 40

symetrical encryption

Front 41

the IPSec mode used when two hosts create a security association directly between them

Back 41

transport mode

Front 42

a data encryption algorithm that uses three 56-bit keys in three rounds to give an effective key length of 168 bits

Back 42

Triple Data Encryption Standard (3DES)

Front 43

In tunnel mode, this is the other end if the tunnel with the local host

Back 43

tunnel endpoint

Front 44

the IPSec mode used when two routers encapsulate all traffic transferred between two or more networks

Back 44

tunnel mode

Front 45

a standard for certificates that was created by the International Telecommunication Union - Telecommunication (ITU-T)

Back 45

X.509